From: Dan Walsh Date: Fri, 2 Dec 2011 12:28:24 +0000 (-0500) Subject: Fixes needed to allow pam_securid.so to work X-Git-Tag: 000~52 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=87f0b8ab08e9ff7f5fccd7dd8bad36abefa896e4;p=people%2Fstevee%2Fselinux-policy.git Fixes needed to allow pam_securid.so to work --- diff --git a/policy/modules/system/authlogin.fc b/policy/modules/system/authlogin.fc index c547c848..a004698a 100644 --- a/policy/modules/system/authlogin.fc +++ b/policy/modules/system/authlogin.fc @@ -32,6 +32,7 @@ ifdef(`distro_gentoo', ` ') /var/cache/coolkey(/.*)? gen_context(system_u:object_r:auth_cache_t,s0) +/var/ace(/.*)? gen_context(system_u:object_r:auth_cache_t,s0) /var/db/shadow.* -- gen_context(system_u:object_r:shadow_t,s0) diff --git a/policy/modules/system/authlogin.if b/policy/modules/system/authlogin.if index 5551d16a..457223d9 100644 --- a/policy/modules/system/authlogin.if +++ b/policy/modules/system/authlogin.if @@ -146,6 +146,7 @@ interface(`auth_login_pgm_domain',` # needed for afs - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253321 kernel_rw_afs_state($1) + kernel_search_network_sysctl($1) tunable_policy(`authlogin_radius',` corenet_udp_bind_all_unreserved_ports($1)